Manual-first Windows server guide
Enshrouded Dedicated Server Setup, Roles, Saves and Ports
This Enshrouded guide uses Keen Games' current JSON schema, where password-bearing userGroups replace the old single-password pattern and can grant narrowly scoped kick, inventory and base permissions. It resolves the configured save directory, preserves each hexadecimal world file with its metadata and ten rotating generations, and keeps player characters correctly identified as client-side state.
Enshrouded stores its world on the server but each player's character on that player's client, so a server migration never equals a character export. Its recovery design uses static hexadecimal world names, companion metadata, numbered 0–9 generations and an index file. Administration is an in-game role system rather than a documented RCON or HTTP remote-control channel.
Steam tool App ID
2278520
This is project/Steam-catalog data; Keen's installation article names the tool but does not print the ID, so recheck the current Valve manifest.
Main configuration
enshrouded_server.json beside the executable
The first server start creates the file.
Default query port
15637
Keen calls it queryPort but does not explicitly state the protocol in the reviewed articles; the project maps UDP and must socket-test it.
Player slots
1–16
slotCount controls the concurrent capacity, while the host still has to meet the workload.
Save ownership
World server-side; characters client-side
An imported world does not contain every player's local character backup.
Network family
IPv4 only
CGNAT, double NAT or IPv6-only access can block direct hosting even when LAN play works.
Protect the server first: Before editing JSON, importing a host backup, updating or selecting an older generation, stop the server through a product-validated graceful path and copy the complete configured saveDirectory. Do not rename one hex world file or invent a remote save command.
Size the host before downloading
PC and capacity guidance
CPU, RAM, SSD and per-player bandwidth values are Keen Games recommendations. The calculated full-slot upload and advice to retain extra snapshot capacity are conservative editorial planning, not official guarantees.
| Profile | Players | Memory | Processor | Storage |
|---|---|---|---|---|
| Official 4–6-player profile Official documentation | 4–6 players | 16 GB host RAM | Intel i7 3.2 GHz or equivalent AMD, 6 cores/12 threads | SSD with at least 30 GB free |
| Official 16-player profile Official documentation | Up to 16 players | 16 GB host RAM | Intel i7 3.7 GHz or equivalent AMD, 8 cores/16 threads | SSD with at least 30 GB free |
First launch
Install and generate a current JSON configuration
Let the official tool create its schema, then configure modern role groups while the process is stopped.
- 1
Install the Steam tool
Enable Tools in Steam Library, install Enshrouded Dedicated Server and browse its local files. Recheck app 2278520 before using SteamCMD automation.
- 2
Generate and protect the JSON
Run enshrouded_server.exe directly once, stop it, then copy the generated enshrouded_server.json before editing.
- 3
Configure least-privileged groups
Use current userGroups with distinct passwords and only the kick/ban, inventory, base and reserved-slot permissions each role needs.
Do not teach the obsolete top-level password as the modern schema; legacy values are migrated to a default group.
Acceptance test
Reach HostOnline, join and prove the world survives
A healthy process must become host-online, admit the intended role and reload the same world after the validated stop path.
- 1
Wait for readiness
Read the configured logs until the session reaches the documented [Session] 'HostOnline' (up)! state.
- 2
Join locally and externally
Use the in-game Join page with Show dedicated server enabled or Steam's Game Servers add-by-IP flow, then test a genuinely external IPv4 route.
- 3
Verify save and restart
Create recognizable world state, wait through the documented save windows, use the manager's tested graceful stop and confirm the same base/world after restart.
Keen documents periodic saves and a shutdown copy but no native remote save/shutdown command; do not invent one.
Keep every layer consistent
Ports, firewall, and router setup
Open only the services your Enshrouded server actually uses. The game process, Windows Firewall rule, router forward, and player join address must all agree on the same port and protocol.
| Port | Protocol | Purpose | Exposure | Notes |
|---|---|---|---|---|
| 15637 (configurable queryPort) | UDP | Server discovery and online session path | Internet playersRequired for this use | The port/purpose are official; the reviewed Keen pages do not explicitly name UDP. The local provider's UDP mapping needs a current socket capture and external-join result before publication.[ens-config][ens-server-faq][ens-network] |
Never expose an administration or RCON port merely so players can join. Keep remote administration private whenever possible, use a strong unique credential, and confirm the game's own security model before forwarding it.
Know what must survive a reinstall
Files, worlds, and configuration
| File or folder | Purpose | Backup | Notes |
|---|---|---|---|
| enshrouded_server.json | Network, directory, slot, chat, role and gameplay configuration | Critical | Stored beside the executable by default; malformed JSON or invalid text can prevent startup.[ens-install][ens-config][ens-gameplay][ens-roles] |
| Configured saveDirectory (default ./savegame) | Hex-named worlds, metadata, numbered generations and recovery indexes | Critical | Resolve the active JSON value and service working directory before assuming the default path.[ens-config][ens-save][ens-server-faq] |
| Configured logDirectory (default ./logs) | Current readiness, validation and fault diagnostics | Recommended | Older logs move under ./logs/backup by default; redact secrets and local identity before sharing.[ens-config][ens-reporting] |
| <hex-world-id>, <hex-world-id>_info, numbered copies and -index metadata | One complete recoverable world generation set | Critical | Do not rename or move only the visually obvious world file.[ens-save] |
| Setting or file | Location | What it controls | Restart? |
|---|---|---|---|
name, ip, queryPort and slotCountBind 0.0.0.0, keep 15637 unless a conflict exists, and start below maximum slots | enshrouded_server.json | Defines discovery identity, IPv4 bind, listener and 1–16 slot capacity.[ens-config] | Yes |
saveDirectory and logDirectoryUse stable explicit directories when a Windows service changes the working directory | enshrouded_server.json | Locates persistent world state and diagnostics.[ens-config][ens-save] | Yes |
userGroupsCreate a least-privileged player group and a separate unique administrator password | enshrouded_server.json | Defines role passwords, permissions and reserved slots.[ens-roles] | Yes |
gameSettingsPresetDefault for the first validation run | enshrouded_server.json | Selects Default, Relaxed, Hard, Survival or Custom gameplay behavior.[ens-gameplay] | Yes |
gameSettingsChange one documented value at a time after preserving known-good JSON | enshrouded_server.json | Applies individual gameplay values when the preset is Custom.[ens-gameplay] | Yes |
Avoid incompatible clients and unsafe shortcuts
Players, mods, and administration
Cross-play and editions
Current official documentation is Steam PC only; PS5 and Xbox versions are planned after development is complete, not current dedicated-server cross-play targets.
- The dedicated-server runtime is currently documented for Windows; Linux is planned.
- Do not claim console joining, console hosting or console cross-play before Keen publishes and the project tests it.
- Characters can travel between servers because they are client-side, but that is not cross-platform server migration.
- Old alpha, beta and demo saves are not compatible with the Early Access release.
Mods and extensions
Keen has not promised current official mod support, so the supported workflow remains a vanilla server with recoverable world/config state.
- Do not label Enshrouded as having native Workshop synchronization.
- Do not copy unverified DLLs or modified binaries as a normal setup step.
- Any third-party mod discussion must be labeled unofficial and separated from product-supported operations.
- Recheck the official FAQ before publication because Early Access capabilities can change.
Administration
Administration uses password-bearing userGroups and in-game permission flags; the reviewed official documentation exposes no native RCON or HTTP remote-admin channel.
- Role flags cover kick/ban, inventory access, base editing/extension and reserved slots.
- Use a separate least-privileged password for ordinary players.
- Do not show remote broadcast, save, kick or ban as working product buttons without a current tested mechanism.
- A query player count does not establish verified player names; display anonymous occupancy when identity is unavailable.
Preserve a return path before maintenance
Updates, backups, and rollback
Update without gambling the world
Protect JSON and the complete resolved save directory before updating; Keen does not promise an arbitrary executable downgrade branch.
- 1
Record paths and stop through the validated manager path
Record build, config/save paths and world identity, wait through the save interval, then use only the graceful stop behavior proven by the product's save-restart test.
- 2
Take an off-tree snapshot
Copy enshrouded_server.json and the entire configured saveDirectory, including every generation and index, outside the install root.
- 3
Update and validate privately
Update the official Steam tool, compare any schema changes, wait for HostOnline and verify the correct world, role passwords and LAN/external joins.
Back up and prove the restore path
Enshrouded keeps ten numbered world generations and an index that selects the latest; always duplicate the whole save directory before selecting an older generation.
- 1
Resolve and freeze the correct world set
Read saveDirectory, stop the server and copy the hex world, _info metadata, numbered copies and -index data together.
- 2
Choose an earlier generation on the copy
Follow Keen's 0–9 index procedure while stopped; retain the original copy in case the selected generation is wrong.
- 3
Start privately and verify gameplay state
Confirm the intended world, bases, permissions and restart behavior before accepting the recovery and reopening access.
Diagnose before reinstalling
Common Enshrouded server problems
Enshrouded never reaches HostOnline after a settings edit
What players see
The process exits or logs an invalid setting before the session becomes ready.
Likely cause
The JSON is malformed, a gameplay text value is invalid, or individual settings were supplied without the Custom preset.
- 1.Preserve the broken file and complete save directory before recovery.
- 2.Read the first invalid-value/log message and compare with the current schema.
- 3.Restore the known-good JSON or regenerate a fresh reference, then reapply one validated change at a time.
Enshrouded loads an empty world after moving to a service
What players see
The server is online, but the established bases are absent.
Likely cause
A relative saveDirectory resolved from a different working directory or an incomplete hex-world set was copied.
- 1.Stop and snapshot both the old and newly created save locations.
- 2.Resolve saveDirectory from the active JSON and the service working directory.
- 3.Move the complete world, _info, numbered and index set, then verify privately.
The Enshrouded password works but role permissions are wrong
What players see
A player can enter yet cannot perform the expected admin/base actions.
Likely cause
The legacy top-level password was assumed to grant administration, or the joining user selected a different userGroups password.
- 1.Back up the active JSON and rotate any shared password exposed in diagnosis.
- 2.Inspect the exact group password and permission flags used for the join.
- 3.Create distinct least-privileged and administrator groups, then test with a non-owner account.
The server reports players but no verified names
What players see
Occupancy is visible while the management UI can only label Player 1.
Likely cause
The available query path provides a count but no documented trustworthy remote identity directory.
- 1.Do not treat a synthetic label as a Steam or character identity.
- 2.Display the verified count and the identity limitation.
- 3.Use in-game role administration unless Keen documents a supported identity API.
Every focused Enshrouded troubleshooting guide
Evidence stays visible
Sources and verification
Technical behavior changes with server builds. These are the references reviewed for this guide. Official documentation wins if a later patch changes a path, port, command, or compatibility rule.
[ens-install] Keen Games
Dedicated Server Installation on Steam ↗Reviewed 2026-08-30 · Official documentation
[ens-config] Keen Games
Dedicated Server Configuration ↗Reviewed 2026-08-30 · Official documentation
[ens-specs] Keen Games
Recommended Server Specifications ↗Reviewed 2026-08-30 · Official documentation
[ens-server-faq] Keen Games
Dedicated Server FAQ ↗Reviewed 2026-08-30 · Official documentation
[ens-roles] Keen Games
Server Roles Configuration ↗Reviewed 2026-08-30 · Official documentation
[ens-gameplay] Keen Games
Server Gameplay Settings ↗Reviewed 2026-08-30 · Official documentation
[ens-save] Keen Games
Save Game Management ↗Reviewed 2026-08-30 · Official documentation
[ens-network] Keen Games
Network Troubleshooting ↗Reviewed 2026-08-30 · Official documentation
[ens-general-faq] Keen Games
Frequently Asked Questions ↗Reviewed 2026-08-30 · Official documentation
[ens-reporting] Keen Games
Reporting Bugs ↗Reviewed 2026-08-30 · Official documentation
Keep learning
Related guides
Host a game server at home
Prepare Windows, public IPv4 and backup boundaries for an Enshrouded world.
Open guide →
Enshrouded troubleshooting
Diagnose JSON, world-path and role failures without risking the only save set.
Open guide →
Enshrouded dedicated-server FAQ
Review concise answers about roles, saves, characters, platforms and recovery.
Open guide →